Cisco Cybersecurity Operations Fundamentals (CBROPS) 200-201

Course Benefits

• Expand your knowledge base and validate your skills to appeal to potential employers.
• Improve your potential earning power to command a higher salary.
• Learn to perform complex, hands-on activities through lab, study and practice sessions.
• Gain exposure to a wide variety of important features, functions, and tasks.
• Develop a Defence in Depth mindset against threat factors.
• Differentiate yourself from your peers with broader & deeper capabilities to defend your infrastructures using best approach for protection.

Objective

After taking this course, you should be able to:

• Explain how a Security Operations Center (SOC) operates and describe the different types of services that are performed from a Tier 1 SOC analyst’s perspective.
• Explain Network Security Monitoring (NSM) tools that are available to the network security analyst.
• Explain the data that is available to the network security analyst.
• Describe the basic concepts and uses of cryptography.
• Describe security flaws in the TCP/IP protocol and how they can be used to attack networks and hosts.
• Understand common endpoint security technologies.
• Understand the kill chain and the diamond models for incident investigations, and the use of exploit kits by threat actors.
• Identify resources for hunting cyber threats.
• Explain the need for event data normalization and event correlation.
• Identify the common attack vectors.
• Identify malicious activities.
• Identify patterns of suspicious behaviors.
• Conduct security incident investigations.
• Explain the use of a typical playbook in the SOC.
• Explain the use of SOC metrics to measure the effectiveness of the SOC.
• Explain the use of a workflow management system and automation to improve the effectiveness of the SOC.